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Abstract — In this paper we introduce tlie class of Spread 
Codes for tlie use in random network coding. Spread 
Codes are based on tiie construction of spreads in finite 
projective geometry. Tiie major contribution of the paper 
is an efficient decoding algorithm of spread codes up to 
half the minimum distance. 



I. Introduction 

In [KK07] Kotter and Kschischang develop a novel 
framework for random network coding. In this frame- 
work information is encoded in subspaces of a given 
ambient space over a finite field. A natural metric is 
introduced where two subspaces are 'close to each other' 
as soon as their dimension of intersection is large. 
This new framework poses new challenges to design 
new codes with large distances and to come up with 
efficient decoding algorithms. Several new papers have 
been written on the topic and we mention [SKK07] 
and [MU07]. 

In this paper we study the class of spreads from finite 
projective geometry (see e.g. [Hir98]) for possible use 
in network coding theory. A spread 5 is a partition 
of a vector space by subspaces of a fixed dimension. 
Elements of a spread are subspaces of a fixed vector 
space which pairwise only intersect in the origin. 
The codewords derived in this way are all subspaces of 
the same dimension. In other words the spread 5 is a 
subset of the finite Grassmannian G(/c,Fg) consisting 
of all A;-dimensional subspaces in F^. We will call 
the obtained code a Spread code. Since two different 
elements of S only intersect in the origin the spread 
code S has maximal possible distance among all subsets 
of G(fc,F^). 

First and third autlior were partially supported by Swiss National 
Science Foundation under Grant no. 113251. Second Author was 
supported by the Forschungskredit of the University of Zurich under 
Grant no. 57104101 and by the Swiss National Science Foundation 
under Grant no. 107887. 



The paper is structured as follows. In the next section 
we will explain the construction of spreads and we derive 
some basic properties. In Section 3 the main results of 
the paper are given. We provide an efficient decoding 
algorithm for spread codes essentially 'up to half the 
minimum distance' with its complexity. The decoding 
algorithm requires methods from linear algebra and the 
application of the Euclidean algorithm. 

II. Algebraic Construction of a Spread Code 

Let ¥g be the finite field with q elements. We denote 
with G(/c,Fg) the Grassmannian of all A;-dimensional 
subspaces of F^. Following [KK07] we define a distance 
function d : G(fc,F^) x G(A;,F^) ^ Z+ through: 

d{A,B) := dim{A + B) -dim{AnB) (1) 
= dim(^) + dim(5) - 2 dim(A n B). 

It has been observed in [KK07] that d{A, B) satisfies the 
axioms of a metric on the finite Grassmannian G(A;, F^). 
A constant-dimension code S C G{k,¥'^) has maximal 
possible minimum distance as long as the intersection of 
two different codewords of S is trivial. If two subspaces 
A,B C F^ intersect only in the zero vector then the 
corresponding subspaces of projective space are non- 
intersecting. Based on this we will call A,B C F^ 
nonintersecting subspaces as long as they intersect only 
in the zero vector. 

We want to construct an MDS-like code S C 
G(A;,F^), i.e. code having maximum possible distance 
and maximum number of elements. In order to do this we 
need to restrict our /c, n G N to some particular cases. It 
is a well known result that there exists an 5 C G{k, F^ ) 
that partitions Fg (i.e. there is no vector in Fg which does 
not lie in a subspace) and such that any two elements of 
S are nonintersecting if and only if k divides n. Those 
subsets are called spreads and this result can be found 
in [Hir98]. 
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Consider the case n = rk. Let also p G Fg[x] be 
an irreducible polynomial of degree k. If we denote 
with P the k X k companion matrix of p over ¥q, it 
follows that the Fg-algebra Fg[P] C Matkxki^q) is 
isomorphic to the finite field W^k . Denoting with Ofc , € 
MatfcxfclFg) respectively the zero and the identity matrix 
and given the above assumptions, we are ready to state 
the following theorem. 

Theorem 1: The collection of subspaces 



5 := [J {rowsp [Ofc • • • Ofc h Aj+i • • • Ar\\ 

i=l 

Ai+i,...,Are¥g[P]} cG{k,¥^) 

is a spread of F^. 

Proof: The cardinality of S is exactly the maximum 
number of /c-dimensional nonintersecting subspaces of 
F^, i.e. ^ = + + . . . + g + 1. 

It remains to be shown that any pair of subspaces in S 
do only intersect trivially that is equivalent to showing 
that the 2k x n matrix obtained putting together two 
matrices generating two different subspaces is full-rank. 

We have only two cases. The first where the matrices 
Ik are not placed at the same column "level". In this 
case we can find a full-rank submatrix of the form 



4 

Ok 



A 
Ik 



The second case is when matrices Ik are at the same 
"level". There exists a submatrix of the form 

Ik A2 

where Ai,A2 € ¥g[P] and Ai / ^2- It follows that the 
determinant of the above matrix is equal to det(j4i — ^2) 
and is nonzero since Ai ^ A2. ■ 

Is it possible to find a previous and less general version 
of this theorem in [CGR07]. 

Definition 2: Let p be an irreducible polynomial of 
degree k over ¥q. A spread code 5 is a subset of 
G{k,¥q) constructed as in the previous theorem. Fol- 
lowing the definition of [KK07] a spread code is a q-ary 
code of type [n, k, log^ (^Irrr) , 2fc]. 

Remark 3: Spread codes are related to the Reed- 
Solomon-like codes over Grasmannians presented in the 
paper [KK07]. Following the notation of [KK07], let 
/ = k and m = n — k. From the construction of Theorem 
[H if follows that the subset of S with z = 1 is a subcode 
of Reed-Solomon-like codes. Moreover, our costruction 
provides more codewords arising from the cases where 
i > 1. 

There is an algebraic geometric way to view the 
spreads we just introduced. For this identify the set of 



polynomials in ¥q[x] having degree at most k — 1 with 
the field F^k. Consider the natural isomorphism 

^■.¥qk ^ ¥g[P] 

f ^ f{p)- 

This isomorphism induces the natural embedding 

^■.G{l,¥^k)^G{kl,¥'^q"') 

with 



(f 



rowsp 
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The following theorem is then not difficult to establish. 

Theorem 4: If 5 C G(/,F™) is a spread of F™ then 
(p{S) C G{kl,¥^"^) is a spread of F^"". 

Clearly G(l,F^fc) is a spread itself and it therefore 
follows that the subset defined in Theorem [T] is a spread 
of F^ as well. 



III. Decoding Algorithm 

We will continue restricting our study to the case 
where n = 2k and k is odd. From now on we will 
consider fixed the irreducible polynomial p € Fg [x] . 

In a first step we want to establish a simple alge- 
braic criterion which characterizes the spread code S C 
G(A;,F2'=). For this assume that Ci,C2 G Matfcxfc(Fg) 
are matrices such that 

C:=rowsp[Ci C2] G G{k,¥f). 

If Ci is not invertible then C G 5 if and only if Ci = 0^. 
If Ci is invertible then C G 5 if and only if A := 

{Cir^C2 G ¥g[P]. 

We therefore establish a criterion which guarantees 
that a matrix A is in Fg[P]. Let ¥qk be the splitting field 
of p over ¥q and S G Glk {¥qk ) be an invertible matrix 
diagonalizing the matrix P, i.e. 



D := SPS- 



X 



X" 



where A G ¥qk is a root of p. 

Lemma 5: Let A G Matfcxfc(Fq). Then A G ¥q[P] if 
and only if AP = PA. 
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Proof: If ^ G ¥q[P] then clearly AP = PA. As- 
sume now AP = PA and SPS~^ = D. Since the eigen- 
values of P are pairwise different and D{SAS^^) = 
{SAS^^)D it follows that SAS^^ is a diagonal matrix 
as well with diagonal entries in W^k. Let {1,7,..., 7^^"^} 
be a basis of ¥gk over Fg. One has an expansion: 



SAS- 



fc-i 

E 

j=0 



c,.D' 



k-l fe-1 
i=0 j=0 



with Cj G Fgfc and Cjj- G Fg. 
Equivalently we have: 



fc-i /fe-i \ 



j=0 \i=0 / 

It follows that A = YliZo clqP' and Ae¥g[P]. ■ 
The following gives an algebraic criterion for checking 

when a subspace is a codeword. 

Corollary 6: The subspace rowsp[Ifc A] G G{k,¥g^) 

is a codeword of S if and only if 5^5*^^ is a diagonal 

matrix. 

We state now the unique decoding problem. As- 
sume C := rowsp[Ci C2] G S was sent and R := 
rowsp[i?i R2] G G(A;,Fg'^) was received. If 



dim(C nR)> 



k + l 



(2) 



then unique decoding is possible. In the sequel we will 
consider the received subspace R G G(A;,Fg^) such that 
there exists a codeword C G 5 such that © holds. 

A. Case Ri not invertible. 

Let R and C be subspaces satisfying the condition Q. 
The goal of this subsection is to analyze the behavior of 
the decoding problem when Ri is not invertible. 

This situation splits in two different ones. The first one 
is when < rank(i?i) < The closest codeword in 
this case is only the subspace rowsp[Ofc 1^]. 

The second case is characterized by < 
rank(i?i) < k — 1. With the following lemma we bring 
back the decoding problem of the subspace R to the one 
of a subspace R close related to R and lying in the same 
ball with center in the codeword C. 

Lemma?: Let R G G(k,¥f) such that ^ < 
rank(i2i) < A; - 1 and C G 5 such that © holds. Then 
there exists a subspace R := rowsp[i?i R2] G G(A;,Fg^) 
satisfying: 

• Ri is invertible, 

• dim{R nR) = rank(i?i), and 
. dim(C7ni?) > 



Proof: Let t := rank(i?i). 

matrix [Ri R2] we obtain the matrix 

Ri,R2 e Matixfc(Fg) with Ri fu 
Matfc_txfc(I^g) where is the zero matrix. 



Row reducing the 
Ri R2 
E 
Irank and 0, E 



where 



G 



Since rowsp[0 E] C 
dim(C n rowsp[0 E]) = 



rowsp[Ofc Ik] we deduce that 
0. It follows immediately that 

dim(C7 n rowsp[i?i R2]) = dim(C n ^) > 

The matrix representing the subspace R can then be 
constructed as follows: 

• Ri is the completion of the matrix Ri to an 
invertible matrix, and 

• i?2 is the completion of the R2 to a /c-square matrix 
by adding rows of zeros. 

■ 

Corollary 8: The solution to the unique decoding 
problem for both subspaces R and R consists of the 
same codeword C G S. 

B. Case Ri invertible. 

We can now construct an algorithm for the unique 
decoding problem of subspaces with Ri invertible. 

Theorem 9: Let R := rowsp[i?i R2] G G{k,¥f) a 
subspace with Ri invertible. Then there exists a unique 
matrix A G ¥q[P] and a unique matrix N G Matkxki^q) 
of rank at most such that 

R-^R2 =A + N. 

In this case rowsp[/fc A] is the closest codeword to R in 
the distance ([Til. 

Proof: The uniqueness follows from the distance 
properties of the code. Assume rowsp[/fc A] be the 
closest codeword to R. Since 





" Ik 


A 




rowsp 


Ri 


R2 . 


= rowsp 



Ik 

Ok 



A 



has dimension at most 2k — 
that the matrix N := R]^^R2 



R^'R2 - A 

k-l 



k+l 
2 

— A has rank at most 



k + ^ it follows 

^ k^ 



Corollary 10: Let R := rowsp[fli R2] G G(/c,Ff ) a 
subspace with Ri invertible. Let Y := S{R^^R2)S^^. 
Then there is a unique polynomial / G ¥q[x] with 
deg f < k such that Y — f{D) has rank at most 

Proof: The existence follows directly from the last 
theorem. Concerning the uniqueness assume that Y = 
fi{D) +Ni = f2{D) + N2. It then follows that 

Ri^R2 = MP) + S-^NiS = f2{P) + S-^N2S 

and because of the uniqueness part of Theorem |9] the 
result follows. ■ 
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The algorithm extrapolates the evaluations of the poly- 
nomial / € from the matrix Y — f{D). Once the 
polynomial / € ^q[x] is found, its evaluation at P gives 
us the matrix A ^ ¥q [P] such that rowsp [Ik A] is the 
codeword closest to R. Notice that the coefficients of / 
are exactly the coefficients of the expression of /(A) in 
the basis {1, A, . . . , A^^-^} of ¥gk over F„. 

The following two remarks from finite field theory 
(see [LN94]) will be important. First, given any / e 
¥g[x] and any fi G F^k, then /{fii) = /(/u)''. Second, 
given a finite field ¥q with q elements it holds 

x'^ — X = [x — a). 

We outline now the complete decoding algorithm. 

Let R := rowsp [Ri R2] be the received subspace 
satisfying condition Q. Assume that Ri is invertible. 
Compute Y := S{R^^R2)S-^. If the matrix Y is 
diagonal, then R is already a codeword of S by Corollary 

Otherwise the matrix Y — f{D) is of the form 

/yi,i-/(A) yi,2 ••• yi,k \ 

y2,i 2/2,2 - /(A"?) • • • 2/2,fc 



\ yk,i yk,2 

fyi,i - /(A) 
2/2,1 2/2,2 



2/M-/(A^'" )/ 



2/1,2 



yi,k 

2/2,fc 



V 2/fc,i yk,2 ■ ■ ■ yk,k - fW'' 7 

where some entries off of the diagonal are nonzero. 
Denote by X the matrix obtained from Y — f{D) by 
substituting x for /(A). By Corollary [TO] there exists 
a unique value for x G ¥qk (namely x = /(A)) such 
that rank(X) < The decoding problem reduces to 
finding such a value. 

The condition on the rank is equivalent to having all 
minors of size of the matrix X being zero. This 
gives us a system of univariate equations which apriori 
may be hard to solve. However since the system has a 
unique solution, every minor is divisible by (x — /(A)). 

Hence in order to find /(A) it suffices to compute the 
gcd of the field equation x'^'^ — x with enough equations 
from our system. More precisely we look for a nonzero 
minor of size which does not involve any diagonal 
entry. If no such minor exists, then look for a nonzero 
minor of smaller size which again does not involve any 
diagonal entry. Let t be the size of the minor. Complete 
the corresponding size t submatrix to a submatrix of 
X of size ^ii. Notice that this can be done by adding 
— t rows and columns with the same index. The 



determinant of this submatrix is a nonzero polynomial 
m € Fgfc[x] which has /(A) as a root. 

Apply the Euclidean Algorithm in order to compute 



9 ■= & 



cd{x'' 



x,m) 



If the degree of g is small, compute its roots and 
substitute them in X in order to find /(A). 

Otherwise compute another minor in the same way as 
for the previous one. Proceed by computing the gcd of 
this polynomial with g. The algorithm ends once it finds 
/(A). 



C. Complexity 

The overall complexity of the algorithm is dominated 
by the EucUdean Algorithm. In the worst case scenario, 
i.e. when the maximal nonzero minor off diagonal has 
size 1, the algorithm's complexity is 0{q^^°^^^ logq'') 
in Fgfc. 

The complexity could be drastically decreased by 
the following conjecture: for every error matrix N € 
Matfcxfe(lF'g) of rank t < there exists a nonzero 
minor of size t of the matrix X which does not involve 
any diagonal entry. 

Consider now such a nonzero minor of X and extend 
the related submatrix adding one row and one column 
with the same index. The determinant of this submatrix 
leads to an equation of the type x^' = a with a € ¥g. 
Raising both sides of the equation to the g^~*-th power 
and using the field equation of F^t we get: x = a'^ \ 
Using the Repeated Squaring Algorithm for computing 
powers in ¥qk , the complexity of the decoding algorithm 
decreases to 0(logg'^~*) = 0{k — i) operations in ¥qh. 

A reference for efficient algorithms is [GG03]. In 
particular see Section 4.3 for the Repeated Squaring 
Algorithm, Section 11.1 for performing the Euclidean 
Algorithm, Chapter 14 for factoring univariate polyno- 
mials and Section 25.5 for computing determinants. 



D. Non-perfectness of a Spread Code 

Spreads are perfect in the sense that every nonzero 
vector of F^ is in one and only one subspace of the 
spread. 

In coding theory a code is perfect if the total ambient 
space is covered with the balls centered in the codewords 
and having radius half the minimum distance. It arises 
the question if spread codes are perfect in this sense. 
The answer turns out to be negative in general and this 
result can be found in [MZ95]. 
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